9313 matches found
CVE-2023-45799
In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files...
Input validation
In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files...
CVE-2023-45799 MLSoft TCO!stream Remote Code Execution Vulnerability
In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files...
CVE-2023-45799 MLSoft TCO!stream Remote Code Execution Vulnerability
In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files...
CVE-2023-45799
MLSoft TCO!stream ≤8.0.22.1115 is affected by a vulnerability due to insufficient permission validation, enabling an attacker to cause the victim to download and execute arbitrary files. The connected documents consistently identify the affected product/versions and the core cause but do not prov...
MLSoft TCO!stream Security Vulnerability
MLSoft TCO!stream is a PC asset management solution from MLSoft. A security vulnerability exists in MLSoft TCO!stream version 8.0.22.1115 and earlier, which stems from insufficient privilege validation and allows an attacker to allow a victim to download and execute arbitrary files...
OESA-2023-1771 nghttp2 security update
The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed load test and benchmarking tool for HTTP/2. Security Fixes: The HTTP/2 protocol allows a denial of service server resource...
HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...
CVE-2018-17559
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras...
Improper access control
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras...
CVE-2018-17559
The CVE-2018-17559 entry affects ABUS TVIP cameras, with the root cause described as incorrect access control. The vulnerability allows unauthenticated remote attackers to view the /video.mjpg live stream from certain cameras. Documented risk impact includes confidentiality loss (C:H) without imp...
ABUS TVIP Security Vulnerability
ABUS TVIP is a series of video surveillance cameras from the German company ABUS. A security vulnerability exists in ABUS TVIP that stems from incorrect access control, which allows an unauthenticated remote attacker to view the /video.mjpg video stream of certain cameras...
PT-2023-10705 · Abus · Abus Tvip Cameras
Name of the Vulnerable Software and Affected Versions: ABUS TVIP cameras affected versions not specified Description: The issue is related to incorrect access control, allowing unauthenticated remote attackers to view the "/video.mjpg" video stream. Recommendations: At the moment, there is no...
CVE-2018-17559
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras...
CVE-2018-17559
Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras...
gRPC-Go HTTP/2 Rapid Reset vulnerability
Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, which is valid by the HTTP/2 protocol, but would cause the gRPC-Go server to launch more concurrent method handlers than the configured maximum stream limit...
BIT-2023-44487
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...
A Use Case for Transactions: Outbox Pattern Strategies in Spring Cloud Stream Kafka Binder
Other parts in this blog series Part 1: Introduction to Transactions in Spring Cloud Stream Kafka Applications Part 2: Producer Initiated Transactions in Spring Cloud Stream Kafka Applications Part 3: Synchronizing with External Transaction Managers in Spring Cloud Stream Kafka Applications Part ...